Tips & Tricks
Short, practical notes from the field: tooling, tradecraft, and shortcuts.
Active Directory
16
Windows and Active Directory tradecraft.
AI & LLM Security
19
Auth & Tokens
12
Cloud & Containers
13
Cloud and identity tips.
Exploitation
2
Turning bugs into working access.
Linux & Privesc
8
Linux tips and privilege escalation.
Recon & OSINT
11
Finding attack surface and mapping targets.
Red Team & Evasion
9
Source Code Review
31
Web & API
22
Web application testing tips.
Windows Post-Exploitation
8
All tips
- Prompt injection in code assistants through comments AI coding tools ingest repo files as context, so a crafted comment or config can steer generated code toward a backdoor.
- Poison shared few-shot templates If example sets or prompt templates are user-contributed or fetched at runtime, a poisoned example becomes a persistent instruction.
- Confused-deputy data leak across an agent’s contexts An agent with broad permissions can be steered to read data one user should not see and hand it to another via its own output.
- Insecure output handling: LLM response to stored XSS When an app renders model output as HTML without sanitizing, an attacker who controls part of the prompt gets XSS in the victim's session.
- SSRF and internal access through an LLM URL-fetch tool If the agent can fetch URLs, it is an SSRF primitive with the app's network position; point it at metadata and internal services.
- Hide injections in invisible Unicode tag characters Unicode tag block characters are invisible to humans but tokenized by many models, letting you smuggle instructions into visible text.
- Multi-turn crescendo jailbreak Refusals are usually evaluated per message; a slow escalation across turns walks the model past a boundary one small step at a time.
- Bypass content filters with encoding and token splitting Guardrails often match plaintext; encode or fragment the payload so the model reassembles it after the filter has passed.
- Extract the system prompt with output-format coercion Instead of asking for the hidden prompt, ask the model to repeat everything above in a format that bypasses the do-not-reveal instruction.
- Persistent injection via RAG index poisoning Anything you can write that later gets embedded becomes a stored injection that fires whenever a similar query retrieves it.